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Annotations 


Annotation Meaning 
Omission mark 
= Benefit of the doubt 
Subordinate clause / consequential error 
x< Incorrect point 
Le] Expansion of a point 
LET Follow through 
[NAQ] Not answered question 
Neon) No benefit of doubt given 
LP] Point being made 
REP 


Repeat 


Correct point 


T 


< 


Too vague 


Zero (big) 
Blank Page — this annotation must be used on all blank pages within an answer 
booklet (structured or unstructured) and on each page of an additional object 
where there is no candidate response. 


Fl) FB) [Ol IS 


Level 1 
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Level 2 


Level 3 


Question 


Answer 


Guidance 


1 


(a) 


Client computers connect to server 
Server provides access to a resource/service 
In this case hotel staff use client computers to 


connect to database on server (or other sensible 


example). 


eeeee 


only one point of failure 


easier to manage users/access 

Easier to backup 

Easier to keep data secure. 

Technicians can more easily remotely install / 
monitor. 


AO1.1 


(b) 


Joins computers/devices together on a LAN 
Receives packets/data 

Recipient's address is given in packet header/it 
uses the mac address 

Send packets/data 

Out the correct port /to the specific computer 
device 


AO1.1 
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(c) Mark Band 3-High Level (7-9 marks) 9 AO1 

The candidate demonstrates a thorough knowledge Malware and viruses are software that can have a negative impact 
and understanding of network security. The material AO1.1 | on computer systems 

is generally accurate and detailed. Po ‘ Spyware and keyloggers can record information entered and send 

(2) back to a third party 
The candidate is able to apply their knowledge and Ao2.1 | Phishing attacks attempt to steal data by fraudulently appearing as 
understanding directly and consistently to the (2) legitimate emails asking for secure information 
AO3.3 


context provided. Evidence/examples will be 
explicitly relevant to the explanation. 


The candidate provides a thorough discussion which 
is well balanced. Evaluative comments are 
consistently relevant and well-considered. 


There is a well-developed line of reasoning which is 
clear and logically structured. The information 
presented is relevant and substantiated. 


Mark Band 2-Mid Level (4-6 marks) 

The candidate demonstrates reasonable knowledge 
and understanding of network security; the material 
is generally accurate but at times underdeveloped. 


The candidate is able to apply their knowledge and 
understanding directly to the context provided 
although one or two opportunities are missed. 
Evidence/examples are for the most part implicitly 
relevant to the explanation. 


The candidate provides a sound discussion, the 
majority of which is focused. Evaluative comments 
are for the most part appropriate, although one or 
two opportunities for development are missed. 


There is a line of reasoning presented with some 
structure. The information presented is in the most 
part relevant and supported by some evidence. 


Denial of Service Attacks can overload a computer system with 
traffic and effectively disable access for legitimate users 


AOQ2 

Hotel’s systems could be disrupted by DDOS attacks so no external 
bookings able to be made. 

Phishing and spyware attacks may compromise visitor security and 

result in financial loss 

Malware, viruses could destroy hotel data 

Theft of customer data would be an issue under Data Protection Act 
/ GDPR for which the hotel could be prosecuted 


AO3 

Education for staff and customers is important to deal with 
recognising and dealing with threats 

Up to date software, limitations of use of devices such as USB sticks 
and restricted access to wireless networks can all limit risks. 

Use of Firewall to restrict traffic entering and leaving the network. 
Should be balanced against customer experience; will customers 
return if they have no access to It facilities? 
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Mark Band 1-Low Level (1-3 marks) 

The candidate demonstrates a basic knowledge of 
network security; the material is basic and contains 
some inaccuracies. The candidate makes a limited 
attempt to apply acquired knowledge and 
understanding to the context provided. 


The candidate provides a limited discussion which is 
narrow in focus. Judgments if made are weak and 
unsubstantiated. The information is basic and 
communicated in an unstructured way. The 
information is supported by limited evidence and the 
relationship to the evidence may not be clear. 


0 marks 
No attempt to answer the question or response is not 
worthy of credit. 


(d) 


-Customer, Room and Booking entities, must be 
singular 

-Customer joined to Booking and Room joined to 
booking and no other links 

-Customer to Booking relationship indicated as one- 
many 

-Room to Booking relationship indicated as one- 
many 


AOQ2.2 


Customer 


Booking 


e A field that links to a (primary) key ina 
second table 

e Example : Customer ID // RoomID... 

e _... in Booking table 
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iii Hashing for security 4 
...@.g. hash passwords in database 
...to make sure they cannot be read if they og 
are stolen ae 
Hashing for direct access (2) 
...€.g. Customer/Room/Booking records can 
be quickly accessed 
...by using hash of index as address 

(e) Database/relationships are consistent // each 2 Accept example that is not related to the database given (as this is 

foreign key links to an existing/valid primary an AO1 question) 
key AO1.1 
Suitable example of being broken (e.g. if as 
primary key is deleted/updated, foreign keys (1) 
are no longer valid / changes should be 
cascaded) 
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uestion Answer Mark Guidance 
2 (a) | (i) Constructor method definition (.e.g new) 4 Example answer | 
itemname, price passed in as parameters (must use public procedure new(nItemName, nPrice) 
different identifier names to the ones in the AOS Thenname. =n Tremname 
question) price = nPrice 
...and assigned to attributes noe ena = 
discount attribute assigned to 0. P 
Look out for alternative notation 
e.g. 
this.itemname = itemName 
(ii) e 1 mark for creating object with identifier 3 Example answers 
mushypeas = mushypeas=new ItemForSale("mushy peas", 
e 1 mark for creating object as type AO3.2 | 0.89) 
ItemForSale 
e mark for parameters passed in as needed ItemForSale mushypeas = 
ItemForSale(“mushy peas”,0.89); 
mushypeas=ItemForSale( (“mushy 
peas”,0.89); 
Do not penalise for use of self parameter as used by 
languages such as Python. 
Must be correct case and spelling 
(iii) method definition for calculatePrice() 3 Percentage discount must be applied correctly. 
applies percentage discount 
_..returns calculated value AO3.2 | Example answer 
function calculatePrice() 
newPrice = price - (price * discount/100) 
return newPrice 
end function 
2 (b) discount attribute made private 3 
Set method created 
AO2.2 
...that restricts value to maximum 50% 
2 (c) Create new class 4 
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...inheriting from / subclass of L[temsForSale 
new attribute for stock location 
calculatePrice( ) method overridden // new 
version of calculatePrice( ) implemented in 
subclass. 


AOQ2.2 
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uestion Answer Mark Guidance 
3 (a) i 1000 1001 1 Correct answer only 
AO1.2 
3 ii | 6D 1 Correct answer only 
AO1.2 
3 ili | AB 1 Correct answer only 
AO1.2 
3 iv | 1010 0110 2 Correct answer only 
1 mark per nibble AO1.2 
3 (b) e 10110.111 in fixed point 5 
e Move binary point four places to the left (1.0110111) 
e Gives mantissa of 10110111 Pot e 
e therefore exponent is 4 = 0100 
¢ Forming final answer of 10110111 0100 
3 (c) (1) |e 1001 1010 2 1 mark per nibble, mark left to right 
AO1.2 
(ii) 1000 0000 2 
OR 
AQ2.2 
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uestion Answer Mark Guidance 
4 (a) i 3 AB 
e left column filled with 1s (AAA -B)... . 
e right column filled with 1s (A A-B)... AO1.2 ig 1 1 
¢ ...Middle 2 columns filled with zero or blank i i Oe, ES OS 


CD 01 1 0 ) 1 


: 2 AB 
e -=B/NOTB 
e Karnaugh map used to show 1s highlighted with AO2.2 01. «11 
overlap ’ 
00 fs) 0 
CD 01 0 | o 
11 ) ) 
10 ft) ) 
4 | (b) i |e Delay/store a value... 2 
...Of 1 bit 
e When a signal is given AO1.1 
4 | (b) | li |e Data input A 


e Clock input 
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e Q output AO1.1 
e When clock input goes high... noe 
e ...Q changes to D (2) 
e NOT Qis reverse of Q 
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uestion Answer Mark Guidance 
5 Mark Band 3-High Level (7-9 marks) A) AO1 

The candidate demonstrates a thorough knowledge and Encryption means that data is scrambled so that if it is 

understanding of electronic communication monitoring AO1.1 | intercepted, it cannot be understood. 

techniques and the social and legal impact of this. The ae , Requires the use of a key to decrypt. 

material is generally accurate and detailed. (2) Symmetric encryption uses on key for encrypt/decrypt 
AOQ2.1_ | and so key exchange is problematic. 

The candidate is able to apply their knowledge and (2) Asymmetric encryption uses different keys (public and 
AO3.3 


understanding directly and consistently to the context 
provided. Evidence/examples will be explicitly relevant 
to the explanation. 


The candidate provides a thorough discussion which is 
well balanced. Evaluative comments are consistently 
relevant and well-considered. 


There is a well-developed line of reasoning which is 
clear and logically structured. The information 
presented is relevant and substantiated. 


Mark Band 2-Mid Level (4-6 marks) 

The candidate demonstrates reasonable knowledge 
and understanding electronic communication 
monitoring techniques and the social and legal impact 
of this; the material is generally accurate but at times 
underdeveloped. 


The candidate is able to apply their knowledge and 
understanding directly to the context provided although 
one or two opportunities are missed. 
Evidence/examples are for the most part implicitly 
relevant to the explanation. 


The candidate provides a sound discussion, the 
majority of which is focused. Evaluative comments are 
for the most part appropriate, although one or two 
opportunities for development are missed. 


private) so no need to exchange keys. 

Regulation of Investigatory Powers Act (RIPA) gives 
authorities the power to compel disclosure of encryption 
keys 


AOQ2 

Encrypted messages cannot be read by outsiders 
without the key 

RIPA gives Police the power to insist on users 
decrypting messages / handing over the key to allow 
reading of messages. 

Many messaging services already include end-to-end 
encryption by default 

Use of VPNs to re-route traffic and attempt to escape 
monitoring possible 

The ending of encrypted data shows that two parties 
are passing information they want to keep secret. 
Techniques like steganography can be used to his the 
existence of encrypted data. 


AO3 

Monitoring communication runs the risk of revealing 
secret but non-illegal communications 

Restricting encryption means that secure sites (eg 
banks) may struggle to function 

Legislation (RIPA) already ensures that 
communications can be monitored if there is just cause 
Routine monitoring runs the risk of false-positives 
However, will reduce risk of illegal activities being co- 
ordinated (e.g. terrorism, drug trafficking). 
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There is a line of reasoning presented with some 
structure. The information presented is in the most part 
relevant and supported by some evidence. 


Mark Band 1-Low Level (1-3 marks) 

The candidate demonstrates a basic knowledge of 
electronic communication monitoring techniques and 
the social and legal impact of this; the material is basic 
and contains some inaccuracies. The candidate makes 
a limited attempt to apply acquired knowledge and 
understanding to the context provided. 


The candidate provides a limited discussion which is 
narrow in focus. Judgments if made are weak and 
unsubstantiated. The information is basic and 
communicated in an unstructured way. The information 
is supported by limited evidence and the relationship to 
the evidence may not be clear. 


0 marks 
No attempt to answer the question or response is not 
worthy of credit. 
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uestion Answer Mark Guidance 
6 (a) Stores current player 8 Example answer 
...and alternates between player on each go rae 


Allows a number to be input 

...and validates that this is between 1 and 3 
Outputs numbers chosen (e.g. 4, 5, 6) 
Checks if number 15 has been reached 
...and displays winning message 

...and stops 


num = 1 
turn = "player 1" 
while num <= 15 
print(turn + "'s turn") 
choice = input("how many numbers?" ) 
if choice >= 1 and choice <= 3 then 
for y = 1 to choice 
print(num) 
num = num + 1 


next y 

//swap turn 

if turn == "player 1" then 
turn = "player 2" 

else 
turn = "player 1" 

end if 

end if 
endwhile 


print(turn + " wins!") 
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uestion Answer Mark Guidance 
7 (a) e Store value in accumulator at address given 5 
e BRA// BR Mnemonic Instruction 
e Branch if zero AO1.1 ADD Add 
e Branch if Zero or positive SUB Subtract 
e HLT // COB // END 
STA 
LDA Load (to 
accumulator) 
BRA Branch always 
BRZ 
INP Input 
OUT Output 
HLT End program 
7 (b) e Inputs two numbers 6 Example answer 
e ..stores at least one of them start INP 
e Comparison / subtraction to decide which is larger AOS e STA x 
e Jump / output if num1 larger INP 
e Jump / output if num2 larger or nums equal STAy 
e Loops back to start after either output SUB * 
BRP first 
LDA x 
OUT 
BRA start 
first LDA y 
OUT 
BRA start 
xX DAT 


y DAT 
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H446-01 Mark Scheme 
uestion Answer Mark Guidance 
8 (a) Mark Band 3-High Level (9-12 marks) 12 AO1 

The candidate demonstrates a thorough knowledge and Object oriented programming makes use of classes 

understanding of procedural and object oriented AO1.1 | (templates) from which objects are made. 

programming. The material is generally accurate and (2) Classes have attributes and methods 

; AO1.2 ; 

detailed. (2) Classes can be encapsulated by making attributes 
AoO2.1_ | private and providing public access methods 

The candidate is able to apply their knowledge and (23 Object oriented programming supports inheritance 
AO3.3_ | which allows classes to use attributes and methods of 


understanding directly and consistently to the context 
provided. Evidence/examples will be explicitly relevant 
to the explanation. 


The candidate provides a thorough discussion which is 
well balanced. Evaluative comments are consistently 
relevant and well-considered. 


There is a well-developed line of reasoning which is 
clear and logically structured. The information 
presented is relevant and substantiated. 


Mark Band 2-Mid Level (5-8 marks) 

The candidate demonstrates reasonable knowledge 
and understanding of procedural and object oriented 
programming; the material is generally accurate but at 
times underdeveloped. 


The candidate is able to apply their knowledge and 
understanding directly to the context provided although 
one or two opportunities are missed. 
Evidence/examples are for the most part implicitly 
relevant to the explanation. 


The candidate provides a sound discussion, the 
majority of which is focused. Evaluative comments are 
for the most part appropriate, although one or two 
Opportunities for development are missed. 


(5) 


parent classes. 

Object oriented programming supports polymorphism 
meaning that class attributes and methods can take on 
many different forms if required. 


AOQ2 

OO approach would call on classes per type of player 
or enemy object 

Objects made from these classes, so one enemy class 
may generate many enemy objects, each with different 
values for their attributes (e.g. speed, energy) 

Special types of Player or Enemy objects could be 
instantiated from classes that inherit from the original 
Player/Enemy classes, but have attributes/methods of 
their own. 

Polymorphism would allow for the attributes/methods of 
Player/Enemy objects to behave differently from normal 
if required. 


AO3 
OO promotes a modular approach (procedural through 
use of subroutines, OO through classes). 


OO is an abstraction of a real world problem, with 
classes for each type of things to be modelled and 
objects for each instance of these. 


OO has advantages in data security in that 
encapsulation forces developers/users to use methods 
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There is a line of reasoning presented with some 
structure. The information presented is in the most part 
relevant and supported by some evidence. 


Mark Band 1-Low Level (1-4 marks) 

The candidate demonstrates a basic knowledge of 
procedural or object oriented programming; the material 
is basic and contains some inaccuracies. The candidate 
makes a limited attempt to apply acquired knowledge 
and understanding to the context provided. 


(with their built in validation) to access/amend data 
stored in attributes. 


OO has advantages in efficiency of design where 
classes can be reused and can inherit from one 
another. Procedural programming struggles to support 
this. 


OO also offers flexibility through polymorphism. 
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uestion Answer Mark Guidance 
9 | (a) i |e Paging 4 
e ...blocks of memory of equal size / fixed size 
e Segmentation BOT? 
e _...blocks of memory split logically /variable size 
ii | e.g. 2 
e Security 
e _...does not let programs access memory reserved AOQ1.2 
for other programs. 
e Multitasking 
e _...allows multiple programs to run at once 
iii |e (Currently unneeded) pages moved from memory to 2 
secondary storage 
e ...to create room in memory AOQ1.1 
e pages moved back to memory when required 
(b) e Software/program 3 Max two for description, Max one for example 
e _...that allows the operating system to communicate 
with hardware ore 
Examples: . Fn 
e Printer driver (2) 
e Webcam driver 
e Sound card driver 
e Graphics card driver etc. 
(c) e.g. 4 Mark in pairs, 2 marks per example. 
e Encryption 
e ...scrambles meaning of data files with a key AO1.1 | Accept other sensible examples of utility software. 
e Defragmentation 
e ...organises file segments on secondary storage 
e Compression 
e ... reduces size of files 
e Backup 
e ...makes regular copies of files in case of loss 
e Disk Checker 
(d) i |e Source code / program code is freely available 2 
e _...to edit/amend recompile. 
AO1.1 
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Can modify code and adapt IDE to her needs 


Is likely to be financially free of cost. 

Can recompile to work on different systems 
Has the benefit of a community potentially 
improving the system 

Can learn from others 

Can ensure no backdoors / malware 


1 


AO2.1 


Do not accept simply seeing the code (previous 
question). 


(e) 


Sections of code / program file 

Written by other authors / already written 
Containing useful routines 

Suitable example (e.g. GUI routines, database 
access routine, encryption, graphics) 


Maximum 2 for definition, 1 for example 


Save time... 

...because no need to rewrite code 

Use expertise of others.. 

...to complete tasks that require specialist 
knowledge / abstract away complexity. 

Has already been tested/the programmer doesn’t 
have to test it themselves 

Making debugging easier/saving time 


May (significantly) increase size of compiled file... 
...as library contains many routines that aren‘t being 
used. 

Not written by the programmer 

...SO introduces uncertainty / require further testing / 
programmer needs to spend time familiarising 
themselves with it 


AO1.2 


Links the main program to libraries 

..can either include them in the final executable 
code 

..or get the executable code to point to the external 
libraries 


AO1.2 


Accept terms static and dynamic for bullets 2 and 3, but 
only if these are explained. 
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